PPRuNe Forums - View Single Post - 'kgkadi.exe' Any ideas, Gentlemen?
View Single Post
Old 15th December 2008 | 19:57
  #8 (permalink)  
None of the above
20 Anniversary
 
Joined: May 2003
Posts: 307
Likes: 0
From: South East England
Light is beginning to dawn, Gentlemen.

The neighbour ran a malware scan (thanks, stickyb) which revealed twelve nasties, four of which relate to the problem under discussion.
The offending party is adware called 'NaviPromo' and the scan showed the following:

C:\Documents and Settings\User Name\Local Settings\Application Data\kgkadi.exe

C:\Documents and Settings\User Name\Local Settings\Application Data\kgkadi_navps.dat

C:\Documents and Settings\User Name\Local Settings\Application Data\kgkadi_nav.dat

C:\Documents and Settings\User Name\Local Settings\Application Data\kgkadi.dat

Everything has now been quarantined, although the 'kgkadi' entry is still listed as a start up program, albeit a deselected one. I can't find any trace of it in Windows Explorer or in 'Add/Remove programs'. A quick search reveals that there are ways and means of removing it but I've yet to pursue that course any further. It seems that P2P systems are frequently the conduit for such infections and said neighbour has one called 'Sopcast'. Probably bad form to point fingers, but in this instance I'm willing to do so.

Thanks, Gentlemen,

N o t a

Last edited by None of the above; 15th December 2008 at 20:08.
None of the above is offline  
Reply